Help me here!

Message

FatherGhostface · #1 Post by **FatherGhostface** » Wed Jan 04, 2006 5:12 pm

I log on to my computer this morning and there right there are a MILLION messages from people saying "What the?" "This is a virus!!!" And my name "MichaelH2K0" giving out a link of some kind virus!!! Or at least that's what I think, this all happened while I was asleep last night!!! Who could've done this? I think someone's out to get me! They hacked to my account I think they sent people a virus from my computer!!! What should I do?

Vildern · #2 Post by **Vildern** » Wed Jan 04, 2006 5:25 pm

FatherGhostface,

Where did you see those million messages? On MSN?

See that your anti-virus program is up to date and then run a full system scan. See if that solves it.

Are you using Win XP? If so, make sure that the built-in firewall is on.

Then, I advise you to delete your account and create a new one.

EDIT: Download CWShredder and let it scan your ststem.
http://www.intermute.com/spysubtract/cw ... nload.html

Hmm, if you were referring to some sort of a forum, and not MSN, then...
Just delete your account and create a new one. Change your password.

The Guy · #3 Post by **The Guy** » Wed Jan 04, 2006 5:36 pm

I had the same thing happen to me about 6-8 years ago while using AOL. They got into my account and used it to spam others. It's not that it is someone out to get you, it's simply some asshole that found out how to access your account and use it to spam/send virus links to others. Someone who has no morals at all. This is basically a form of identity theft. I would definately do what Vildern advises on deleting your account and making a new one.

FatherGhostface · #4 Post by **FatherGhostface** » Wed Jan 04, 2006 6:16 pm

I changed my password...?

The Guy · #5 Post by **The Guy** » Wed Jan 04, 2006 6:20 pm

I'm not understanding what you mean by that. You just changed your password or you found out it was changed by someone else?

FatherGhostface · #6 Post by **FatherGhostface** » Wed Jan 04, 2006 6:23 pm

I changed my password.

The Guy · #7 Post by **The Guy** » Wed Jan 04, 2006 6:26 pm

Ahh, ok then. I'd be careful still. After I first encountered my problem, I had changed my pass as well. Before I knew it, it happened all over again. I think I changed my password 3-4 times and it just didn't help. Be wary, be very wary.

FatherGhostface · #8 Post by **FatherGhostface** » Wed Jan 04, 2006 6:29 pm

Okay thank you! But let just ask you this, was the person that hacked into your account someone you knew? Or was it some random dumby trying kill peoples computers? And did anything happen to you after he/she did all that using your user name, like the police come or something?

The Guy · #9 Post by **The Guy** » Wed Jan 04, 2006 6:38 pm

As far as I know, it was noone I knew at all. I've never given out my password to anyone and never will, just in case something like that happened. Unfortunately it still did, go figure. No police ever came or anything, but I did get locked out of my AOL account at least 2 times and my sister had to have the account pass reset.

FatherGhostface · #10 Post by **FatherGhostface** » Wed Jan 04, 2006 6:40 pm

Okay! I feel so much better now, thank you! :D

The Guy · #11 Post by **The Guy** » Wed Jan 04, 2006 6:49 pm

No problem at all. Good luck to you and hope it never happens again.

Blackthorne519 · #12 Post by **Blackthorne519** » Thu Jan 05, 2006 7:19 pm

Yeah dude. I got that virus link from your AOL account. The message didn't seem like you, and the link seemed funny so I didn't click it.

I thought someone may have hacked your IM account.

Bt

FatherGhostface · #13 Post by **FatherGhostface** » Thu Jan 05, 2006 8:05 pm

Oh my god! I can't believe someone would have the nerve to do something like that! I'm so sorry Blackthorne! I changed my password it won't happen again! What did they say to you? Can you think of their exact words? This may give me a clue to who it was.

Blackthorne519 · #14 Post by **Blackthorne519** » Fri Jan 06, 2006 4:01 pm

FatherGhostface wrote:Oh my god! I can't believe someone would have the nerve to do something like that! I'm so sorry Blackthorne! I changed my password it won't happen again! What did they say to you? Can you think of their exact words? This may give me a clue to who it was.

It was "LOL!" then the link.

It just seemed a little suspicious. But, like I said - everything's okay.

Bt

FatherGhostface · #15 Post by **FatherGhostface** » Fri Jan 06, 2006 4:03 pm

Okay, sorry again. :cry

moonlit · #16 Post by **moonlit** » Fri Jan 06, 2006 5:54 pm

Hi,

If it was a regular email message the senders address (yours) might have been forged (which is very easy to do). Actually when contacting the mail server you can supply any 'send from' and 'send to' address. Anyone not aware of this will think the message came from you. The only give away is that the receiving mailserver adds the ip of the sending machine to the message. Looking at the headers of the message might reveal the real sender (in most cases these messages are send through a so called 'open relay' which is a badly configured mailserver that not properly adds the sending ip to the message).

If you know the address of your isp's mail server you can try this yourself

Code: Select all

telnet <address of your ips server> 25
help
MAIL FROM: anyemailaddressgoeshere
RCPT TO: emailaddrressofreceiver
DATA
Yadayadayada end with a line with a single dot
.

quit



For instance (lines starting with a number are replies from the server):

telnet moonlit.xs4all.nl 25
220 moonlit.xs4all.nl ESMTP Sendmail 8.12.11/8.12.11; Fri, 6 Jan 2006 18:45:51 +
0100
help
214-2.0.0 This is sendmail version 8.12.11
214-2.0.0 Topics:
214-2.0.0       HELO    EHLO    MAIL    RCPT    DATA
214-2.0.0       RSET    NOOP    QUIT    HELP    VRFY
214-2.0.0       EXPN    VERB    ETRN    DSN     AUTH
214-2.0.0       STARTTLS
214-2.0.0 For more info use "HELP <topic>".
214-2.0.0 To report bugs in the implementation send email to
214-2.0.0       sendmail-bugs@sendmail.org.
214-2.0.0 For local information send email to Postmaster at your site.
214 2.0.0 End of HELP info
mail from: billgates@microsoft.com
250 2.1.0 billgates@microsoft.com... Sender ok
rcpt to: myself@moonlit.xs4all.nl
250 2.1.5 myself@moonlit.xs4all.nl... Recipient ok
data
354 Enter mail, end with "." on a line by itself
Hi spammer
.
250 2.0.0 k06Hjp1F003033 Message accepted for delivery

Now if anyone replies to this message it will go to microsoft.com

Regards, Ron AF Greve[/quote]

Def Zeppelin · #17 Post by **Def Zeppelin** » Sat Jan 07, 2006 3:13 am

My friend was sending me a huge file overnight using AIM and he told me when he came back to his computer everything got deleted...it is just random idiots who are in their mid-age still living with their parents. As for cops? They don't care that your comp got hacked...I am pretty sure.

link5186 · #18 Post by **link5186** » Thu Feb 16, 2006 1:36 am

I saw this kind of problem pop up at my college campus. I figure it's some kind of scripting virus. Essentially, it takes control of whatever messenger (msn, aim, etc) and sends a link to the same virus to everybody on your contact list. It looks like you, but it's not. Most antivirus programs will take care of it. It doesn't appear to do much else, so I'd say it's mostly harmless (other than eating some system resources while it's running).

Lambonius · #19 Post by **Lambonius** » Mon Feb 20, 2006 8:04 pm

FatherGhostface, the AIM-virus to which you are referring is actually something that is fairly common. It happened to me several months ago and I did a clean install of my operating system before realizing that there is actually a number of different fixes out there for a number of different AIM-oriented viruses. http://www.aimfilez.com/?id=virus has several of them available for download, however, a google search of something like "AIM virus" or "AIM virus fix" might yield more. good luck.

Quest For Glory Fan · #20 Post by **Quest For Glory Fan** » Thu Feb 23, 2006 2:44 am

in order to prevent contracting this virus don't download files P2P that look stupid and are unusally small and don't click stupid links. I got it before from someone else that I trusted and I just uninstalled MSN and re installed and it was gone forever.

Help me here!

Help me here!

Well

I

Okay!

Okay!

Oh my god!

Re: Oh my god!

SIGH!